Newest KB Articles in Configuring FTP over SSL

How to set up Core FTP LE to use FTP over SSL

Sun, 12 May 2013 18:11:45 GMT

Windows 2008/IIS 7 and Windows 2012/IIS 8 allow a secure FTP connection via FTP over SSL. Note that this is not the same as SFTP (FTP via SSH), so you may have to experiment a bit with your FTP client settings to get a secure connection. Our tests were successful with the following:

In the top left hand corner of the window (click "File > Connect").
In the "Site Manager" window, click the "New Site" button.
In the "Site Name" box, enter your domain name.
In the "Host/IP/URL" box, enter your domain name or your alternative FTP address. Your alternative FTP address can be found in Control Panel under "Account Info/Edit".
In the "Username" box, enter your FTP username. If you are using the primary user, your FTP username can be found in Control Panel under "Account Info/Edit". For accounts hosted on our Windows Server 2008/IIS 7 and 2012/IIS 8 environments, the FTP user name requires a specific format. Please note that you will need to include the number, the pipe character and your user name.
In the "Password" box, enter the password for the FTP user. If you are using the primary user, the password is the same as your Control Panel password.
In the "Port" box, make sure it is set to "21".
The number in the "Timeout" box defaults to "60" (seconds), but if you are having problems with frequent timeouts, you may want to increase the timeout length.
"Retries" defaults to 2. It is the amount of times the client will automatically attempt to retry connecting to the server should connecting fail. If you wish to enable automatic retries, be sure to check the "Retry On" box.
The "PASV" box is checked by default. This sets the connection mode to "Passive". If you are having problems connecting to the server or staying connected, you can try unchecking this box, which will tell the client to attempt to connect using "Active" mode.
Leave "Use Proxy" unchecked.
In the "Connection" dropdown box, select "AUTH TLS".
Under "SSL Options", check "SSL Listings" and "SSL Transfer". Leave "Clear (CCC)" unchecked.
Check "Windows SSL".
Click "Connect". A box will pop up labeled "Certificate Information". Click "Always Accept".

If you receive a generic "could not connect" error, or in implicit mode see an attempted connection to port 990, you have a configuration error. Please cut and paste the login information from Control Panel to make sure you are supplying the proper credentials.

Looking for added security? SiteLock scans your website to detect hacking, and SiteLock TrueShield provides a Web Application Firewall to block online threats. Protect your site today.

Enabling FTP over SSL

Tue, 25 Nov 2008 03:22:18 GMT

With the FTP server in IIS7 and above, Microsoft has implemented "FTP over SSL," which will encrypt the session between an FTP program that supports FTP over SSL and the FTP server.

We have enabled this feature on the servers by default, so if your FTP program supports FTP over SSL, consult the program's help files for instructions on use or activation.

We have created step-by-step instructions for some common FTP programs:

How to set up Core FTP LE to use FTP over SSL
How to set up WS_FTP Professional to use FTP over SSL
How to set up SmartFTP to use FTP over SSL
How to set up FileZilla to use FTP over SSL
How to set up CuteFTP to use FTP over SSL

Looking for added security? SiteLock scans your website to detect hacking, and SiteLock TrueShield provides a Web Application Firewall to block online threats. Protect your site today.

How to set up FileZilla to use FTP over SSL

Fri, 21 Nov 2008 02:28:19 GMT

Windows 2008/IIS 7 and above allows a secure FTP connection via FTP over SSL. Note that this is not the same as SFTP (FTP via SSH), so you may have to experiment a bit with your FTP client settings to get a secure connection. Our tests were successful with the following.

Click on File and then click on Site Manager...
Click the New Site button and name the site
Fill in the following fields:
- Change the "Logon Type" to "Normal"
- Host – Enter either your domain name or alternate FTP address. The alternate FTP address can be located in Control Panel
- Username – Enter your FTP username. If using the primary account, the FTP username can be located in Control Panel. For accounts hosted on our Windows Server 2008/IIS 7 and 2012/IIS 8 environments, the FTP user name requires a specific format. Please note that you will need to include the number, the pipe character and your user name.
- Password – Enter the password for this user. If using the primary FTP user, please use the same password that you use to log in to Control Panel
- Change the "Encryption" to "Require Explicit FTP Over TLS"
Click Connect to connect
You will receive a "Unknown certificate" message. Place a check mark next to "Always trust certificate in future sessions."
Click "OK"

If you are connecting to our IIS 8 platform, you will encounter some issues with FTPES - FTP over explicit TLS/SSL. The error you will see in your FTP log will be "550 The supplied message is incomplete. The signature was not verified". This is an issue with the settings on your Firewall. We recommend temporarily disabling your firewall while you are using FTP over SSL.

Looking for added security? SiteLock scans your website to detect hacking, and SiteLock TrueShield provides a Web Application Firewall to block online threats. Protect your site today.

How to set up CuteFTP to use FTP over SSL

Fri, 21 Nov 2008 02:27:08 GMT

Windows 2008/IIS 7 or Windows 2012/IIS 8 allows a secure FTP connection via FTP over SSL. Note that this is not the same as SFTP (FTP via SSH), so you may have to experiment a bit with your FTP client settings to get a secure connection. Our tests were successful with the following.

Click File -> Connect/Connect to bring up the Site Properties connection window or press the keys "Ctrl" + "T".
Fill in the following fields:
- Enter a name you want to use to identify your DiscountASP.Net account on the CuteFTP label text box
- Change the "Login Method" to "Normal"
- Host Address – Enter either your domain name or alternate FTP address. The alternate FTP address can be located in Control Panel
- Username – Enter your FTP username. If using the primary account, the FTP username can be located in Control Panel
- Password – Enter the password for this user. If using the primary FTP user, please use the same password that you use to log in to Control Panel
Click the Type tab on the Site Properties box and under the “Protocol type:” choose FTP with TLS/SSL (AUTH TLS – Explicit)
Click Connect to connect

If you receive a "could not connect" error, or in implicit mode see an attempted connection to port 990, you have a configuration error. Please cut and paste the login information from Control Panel to make sure you are supplying the proper credentials and/or check the Protocol Type to specify “FTP with TLS/SSL (AUTH TLS – Explicit)”.

These instructions were tested on cuteFTP version 9.

Looking for added security? SiteLock scans your website to detect hacking, and SiteLock TrueShield provides a Web Application Firewall to block online threats. Protect your site today.

How to set up SmartFTP to use FTP over SSL

Fri, 21 Nov 2008 02:25:15 GMT

Click File -> "New Connection"
Set the "Protocol" Field to "FTPS (Explicit)"
Fill in the following fields:
- Host – Enter either your domain name or alternate FTP address. The alternate FTP address can be located in Control Panel
- Username – Enter your FTP username. If using the primary account, the FTP username can be located in Control Panel. For accounts hosted on our Windows Server 2008/IIS 7 and 2012/IIS 8 environments, the FTP user name requires a specific format. Please note that you will need to include the number, the pipe character and your user name.
- Password – Enter the password for this user. If using the primary FTP user, please use the same password that you use to log in to Control Panel
Click OK to connect

Looking for added security? SiteLock scans your website to detect hacking, and SiteLock TrueShield provides a Web Application Firewall to block online threats. Protect your site today.

How to set up WS_FTP Professional to use FTP over SSL

Fri, 21 Nov 2008 02:23:27 GMT

Click Connect -> "Create Site" in the "Site Manage" box.
In the Site Name field, enter your domain name and click next
In the "Connection Type" box select FTP/SSL (Auth SSL) and click next
Fill out the remaining fields as follows:
- Server Address – Enter either your domain name or alternate FTP address. The alternate FTP address can be located in Control Panel
- User Name – Enter your FTP username. If using the primary account, the FTP username can be located in Control Panel. For accounts hosted on our Windows Server 2008/IIS 7 and 2012/IIS 8 environments, the FTP user name requires a specific format. Please note that you will need to include the number, the pipe character and your user name.
- Password – Enter the password for this user. If using the primary FTP user, please use the same password that you use to log in to Control Panel
Click Next to complete the Wizard
Click "Finish"
You will receive a "Non-Trusted Certificate" message box
Select "Trust this certificate" and click "OK"

Looking for added security? SiteLock scans your website to detect hacking, and SiteLock TrueShield provides a Web Application Firewall to block online threats. Protect your site today.